Bug 1155531

Summary: HTTP Server used for management not handling requires and wants ClientAuth correctly.
Product: [JBoss] JBoss Enterprise Application Platform 6 Reporter: Darran Lofthouse <darran.lofthouse>
Component: Domain Management, SecurityAssignee: Darran Lofthouse <darran.lofthouse>
Status: CLOSED CURRENTRELEASE QA Contact: Petr Kremensky <pkremens>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 6.4.0CC: dandread, kkhan
Target Milestone: DR8   
Target Release: EAP 6.4.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2019-08-19 12:41:51 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1155532    
Bug Blocks:    

Description Darran Lofthouse 2014-10-22 10:23:25 UTC
The code currently contains the following lines one after the other: -

    engine.setNeedClientAuth (params.getNeedClientAuth());
    engine.setWantClientAuth (params.getWantClientAuth());

However the Javadoc clearly states that calling one will override what was called previously - in other words they should only be called if being set to true.

Note to QE:  I would suggest this issue does not need testing as it was discovered as a side effect to bz1153854 - instead along with bz1153854 we just need to verify no regressions regarding SSL configuration which should actually be picked up by the testsuite already (as this one was).

Comment 4 Petr Kremensky 2014-12-10 09:01:48 UTC
Verified on EAP 6.4.0.DR12